AU-9(6)
AU-9(6): Read-only Access
Authorize read-only access to audit information to [a subset of privileged users or roles with authorized read-only access to audit information is defined;].
Supplemental
Restricting privileged user or role authorizations to read-only helps to limit the potential damage to organizations that could be initiated by such users or roles, such as deleting audit records to cover up malicious activity.
| CIA Levels | |
|---|---|
| Confidentiality | unknown |
| Integrity | moderate |
| Availability | moderate |
| Overlays |
|---|
| DAF Baseline, Int-A, Int-B, Int-C |
| CSF Categories |
|---|
| None |